Jeffrey 'jf' Lim:
> Am I misunderstanding something here, that setting
> 'smtpd_client_restrictions = reject_unauth_pipelining' should reject a
> client that sends the EHLO, or HELO before the smtp banner?
> (http://www.postfix.org/postconf.5.html#reject_unauth_pipelining:
> 'Reject the request when the client sends SMTP commands ahead of time
> where it is not allowed, ...')
Current reject_unauth_pipelining implementations reject clients
that pipeline input that *follows* EHLO/HELO and later commands.
They don't reject clients that talk before Postfix greets them.
To reject clients that talk before Postfix greets them, use
Postscreen's pregreet detection feature.
Wietse
